Warning: Permanently added '[localhost]:42913' (ECDSA) to the list of known hosts.
2022/10/02 15:11:01 fuzzer started
2022/10/02 15:11:01 dialing manager at localhost:35095
syzkaller login: [   40.931497] cgroup: Unknown subsys name 'net'
[   41.032205] cgroup: Unknown subsys name 'rlimit'
2022/10/02 15:11:16 syscalls: 203
2022/10/02 15:11:16 code coverage: enabled
2022/10/02 15:11:16 comparison tracing: enabled
2022/10/02 15:11:16 extra coverage: enabled
2022/10/02 15:11:16 setuid sandbox: enabled
2022/10/02 15:11:16 namespace sandbox: enabled
2022/10/02 15:11:16 Android sandbox: enabled
2022/10/02 15:11:16 fault injection: enabled
2022/10/02 15:11:16 leak checking: enabled
2022/10/02 15:11:16 net packet injection: enabled
2022/10/02 15:11:16 net device setup: enabled
2022/10/02 15:11:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/02 15:11:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/02 15:11:16 USB emulation: enabled
2022/10/02 15:11:16 hci packet injection: enabled
2022/10/02 15:11:16 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930                                          )
2022/10/02 15:11:16 802.15.4 emulation: enabled
2022/10/02 15:11:16 fetching corpus: 0, signal 0/0 (executing program)
2022/10/02 15:11:17 starting 8 fuzzer processes
15:11:17 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0)
r2 = socket(0x0, 0x9b5449212a455845, 0x3)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

15:11:17 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006b00), 0x501002, 0x0)
ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000006b40)={'\x00', 0x80000000, 0x1, 0x401})

15:11:17 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
r6 = memfd_secret(0x80000)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680))

15:11:17 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:11:17 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
r3 = memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000005c0))
read$snapshot(r2, &(0x7f0000000680)=""/49, 0x31)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

[   55.770084] audit: type=1400 audit(1664723477.124:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:11:17 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
clock_getres(0x5, &(0x7f0000006540))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)
ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f00000065c0)={'\x00', 0x10000, 0x2, 0x6dc94db7})

15:11:17 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
r7 = semget(0x2, 0x4, 0x210)
semop(r7, &(0x7f0000000b40)=[{0x0, 0x7, 0x1000}, {0x0, 0xfff, 0x1800}, {0x2, 0x1, 0x1000}, {0x4, 0x7ff}, {0x0, 0xfbb, 0x1000}, {0x4, 0x5}], 0x6)
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:11:17 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x8, 0x1, 0x0, 'queue1\x00', 0x9})
socket(0xb, 0x1, 0xc0000000)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

[   56.957242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.960241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.961897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.965832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.975592] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   56.979481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.986204] Bluetooth: hci0: HCI_REQ-0x0c1a
[   57.009014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.012762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.015232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.019442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.022452] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   57.023971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.029958] Bluetooth: hci2: HCI_REQ-0x0c1a
[   57.045432] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.047359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.051163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.054050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.055933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   57.057974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.062581] Bluetooth: hci1: HCI_REQ-0x0c1a
[   57.101633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   57.103841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   57.108192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   57.110041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   57.111475] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   57.112883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   57.114306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   57.115837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   57.117159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   57.124583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   57.126389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   57.127595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   57.134919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   57.137315] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   57.139258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   57.140792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   57.142008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   57.143198] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   57.144544] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   57.146109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   57.146831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   57.151755] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   57.153925] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   57.155138] Bluetooth: hci5: HCI_REQ-0x0c1a
[   57.156929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   57.158214] Bluetooth: hci6: HCI_REQ-0x0c1a
[   57.163425] Bluetooth: hci3: HCI_REQ-0x0c1a
[   57.167267] Bluetooth: hci7: HCI_REQ-0x0c1a
[   59.048204] Bluetooth: hci2: command 0x0409 tx timeout
[   59.049098] Bluetooth: hci0: command 0x0409 tx timeout
[   59.112018] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   59.112094] Bluetooth: hci1: command 0x0409 tx timeout
[   59.175761] Bluetooth: hci5: command 0x0409 tx timeout
[   59.175823] Bluetooth: hci3: command 0x0409 tx timeout
[   59.176471] Bluetooth: hci7: command 0x0409 tx timeout
[   59.177117] Bluetooth: hci6: command 0x0409 tx timeout
[   61.096242] Bluetooth: hci0: command 0x041b tx timeout
[   61.096781] Bluetooth: hci2: command 0x041b tx timeout
[   61.159750] Bluetooth: hci1: command 0x041b tx timeout
[   61.223854] Bluetooth: hci7: command 0x041b tx timeout
[   61.224324] Bluetooth: hci6: command 0x041b tx timeout
[   61.225193] Bluetooth: hci3: command 0x041b tx timeout
[   61.225591] Bluetooth: hci5: command 0x041b tx timeout
[   61.651108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   61.652306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   61.653359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   61.656301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   61.657360] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   61.658147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   61.660895] Bluetooth: hci4: HCI_REQ-0x0c1a
[   63.143904] Bluetooth: hci2: command 0x040f tx timeout
[   63.143920] Bluetooth: hci0: command 0x040f tx timeout
[   63.207742] Bluetooth: hci1: command 0x040f tx timeout
[   63.271810] Bluetooth: hci5: command 0x040f tx timeout
[   63.271843] Bluetooth: hci3: command 0x040f tx timeout
[   63.272291] Bluetooth: hci6: command 0x040f tx timeout
[   63.272731] Bluetooth: hci7: command 0x040f tx timeout
[   63.720404] Bluetooth: hci4: command 0x0409 tx timeout
[   65.191765] Bluetooth: hci0: command 0x0419 tx timeout
[   65.192227] Bluetooth: hci2: command 0x0419 tx timeout
[   65.255805] Bluetooth: hci1: command 0x0419 tx timeout
[   65.319858] Bluetooth: hci6: command 0x0419 tx timeout
[   65.320305] Bluetooth: hci3: command 0x0419 tx timeout
[   65.320734] Bluetooth: hci5: command 0x0419 tx timeout
[   65.321164] Bluetooth: hci7: command 0x0419 tx timeout
[   65.767798] Bluetooth: hci4: command 0x041b tx timeout
[   67.815738] Bluetooth: hci4: command 0x040f tx timeout
[   69.863753] Bluetooth: hci4: command 0x0419 tx timeout
15:12:09 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
r7 = semget(0x2, 0x4, 0x210)
semop(r7, &(0x7f0000000b40)=[{0x0, 0x7, 0x1000}, {0x0, 0xfff, 0x1800}, {0x2, 0x1, 0x1000}, {0x4, 0x7ff}, {0x0, 0xfbb, 0x1000}, {0x4, 0x5}], 0x6)
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:09 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
r7 = semget(0x2, 0x4, 0x210)
semop(r7, &(0x7f0000000b40)=[{0x0, 0x7, 0x1000}, {0x0, 0xfff, 0x1800}, {0x2, 0x1, 0x1000}, {0x4, 0x7ff}, {0x0, 0xfbb, 0x1000}, {0x4, 0x5}], 0x6)
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:09 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
r7 = semget(0x2, 0x4, 0x210)
semop(r7, &(0x7f0000000b40)=[{0x0, 0x7, 0x1000}, {0x0, 0xfff, 0x1800}, {0x2, 0x1, 0x1000}, {0x4, 0x7ff}, {0x0, 0xfbb, 0x1000}, {0x4, 0x5}], 0x6)
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

[  108.754533] mmap: syz-executor.3 (3889) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
15:12:27 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
r3 = memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000005c0))
read$snapshot(r2, &(0x7f0000000680)=""/49, 0x31)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:27 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0)
r2 = socket(0x0, 0x9b5449212a455845, 0x3)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

15:12:27 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006b00), 0x501002, 0x0)
ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000006b40)={'\x00', 0x80000000, 0x1, 0x401})

15:12:27 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x8, 0x1, 0x0, 'queue1\x00', 0x9})
socket(0xb, 0x1, 0xc0000000)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:12:27 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
semget(0x2, 0x4, 0x210)
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:27 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
clock_getres(0x5, &(0x7f0000006540))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)
ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f00000065c0)={'\x00', 0x10000, 0x2, 0x6dc94db7})

15:12:27 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:12:27 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
r6 = memfd_secret(0x80000)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680))

15:12:27 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0)
r2 = socket(0x0, 0x9b5449212a455845, 0x3)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

15:12:27 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
r2 = semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r3 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r4 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r5 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000980)={{0x2, r6, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r3, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r6, 0xffffffffffffffff, r6, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000b00)=[0x1ff, 0x5, 0x6, 0xe1c0, 0x4])
semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:27 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0)
r2 = socket(0x0, 0x9b5449212a455845, 0x3)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000a80))

15:12:40 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
clock_getres(0x5, &(0x7f0000006540))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)
ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f00000065c0)={'\x00', 0x10000, 0x2, 0x6dc94db7})

15:12:40 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006b00), 0x501002, 0x0)
ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000006b40)={'\x00', 0x80000000, 0x1, 0x401})

15:12:40 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0)
socket(0x0, 0x9b5449212a455845, 0x3)

15:12:40 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x8, 0x1, 0x0, 'queue1\x00', 0x9})
socket(0xb, 0x1, 0xc0000000)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:12:40 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
r3 = memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000005c0))
read$snapshot(r2, &(0x7f0000000680)=""/49, 0x31)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:40 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r4 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000980)={{0x2, r5, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r2, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r5, 0xffffffffffffffff, r5, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:40 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:12:40 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
r6 = memfd_secret(0x80000)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680))

15:12:40 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
clock_getres(0x5, &(0x7f0000006540))
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)
ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f00000065c0)={'\x00', 0x10000, 0x2, 0x6dc94db7})

15:12:40 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
r3 = memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000005c0))
read$snapshot(r2, &(0x7f0000000680)=""/49, 0x31)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:40 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
clock_getres(0x5, &(0x7f0000006540))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:12:40 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
r1 = memfd_secret(0x0)
write$rfkill(r1, &(0x7f00000009c0)={0x1, 0x7, 0x1, 0x1, 0x1}, 0x8)
socket(0x0, 0x9b5449212a455845, 0x3)

15:12:40 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
r6 = memfd_secret(0x80000)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680))

15:12:40 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r4 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000980)={{0x2, r5, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r2, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000a80)={{0x3, r5, 0xffffffffffffffff, r5, 0xee01, 0x0, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:40 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:12:41 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
r3 = memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000005c0))
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:52 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:12:52 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000006500)=0x8001, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:12:52 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
memfd_secret(0x0)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:52 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
memfd_secret(0x0)
socket(0x0, 0x9b5449212a455845, 0x3)

15:12:52 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x8, 0x1, 0x0, 'queue1\x00', 0x9})
socket(0xb, 0x1, 0xc0000000)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:12:52 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
r6 = memfd_secret(0x80000)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:12:52 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000006b00), 0x501002, 0x0)
ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000006b40)={'\x00', 0x80000000, 0x1, 0x401})

15:12:52 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r4 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000980)={{0x2, r5, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semtimedop(r2, &(0x7f0000000a00)=[{0x1, 0x7, 0x800}, {0x1, 0x248e, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x4, 0x44e675a603ff63f3}, {0x3, 0x101, 0x800}], 0x5, &(0x7f0000000a40)={0x77359400})
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:52 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
r4 = semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000980)={{0x2, r5, 0xee00, 0xee01, 0x0, 0x3d, 0x40}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x3f})
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:52 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
r4 = accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r5 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = memfd_secret(0x0)
accept4(r7, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r6, 0x6, r5)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:12:52 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
memfd_secret(0x0)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:12:52 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0xdba7, 0x0, 0xcf5})
socket(0x0, 0x9b5449212a455845, 0x3)

15:12:52 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
semget(0x2, 0x0, 0x480)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', &(0x7f0000000900), 0x100)
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:12:52 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:12:52 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:12:52 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x8, 0x1, 0x0, 'queue1\x00', 0x9})
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:05 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006b00), 0x501002, 0x0)

15:13:05 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
memfd_secret(0x0)
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:05 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
semget(0x2, 0x0, 0x480)
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:05 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r4 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r4)
r6 = memfd_secret(0x0)
accept4(r6, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
keyctl$negate(0xd, r5, 0x6, r4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:05 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000900)={0x5cf6, 0x4})
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:05 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:13:05 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x1, 0x0, 0x4}, 0xfff, 0x3})
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:05 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:05 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000007c0)=""/204)
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:05 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:13:05 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r4 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r4)
r5 = memfd_secret(0x0)
accept4(r5, &(0x7f0000006440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000064c0)=0x80, 0x80000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:05 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:05 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000780)=[0xfed8, 0x2])
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:05 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0))
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:05 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:05 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0), 0x4)
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:20 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000006ac0), 0x4)

15:13:20 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r4 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r4)
memfd_secret(0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:20 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000880)=0x9, 0x8, 0x1)
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:20 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:13:20 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:20 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
r3 = semget(0x2, 0x3, 0x42)
semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:20 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x181080)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:20 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:20 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:20 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
r2 = memfd_secret(0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x3, 0x2, 0x1, 0x80000000}, 0x9, 0x7, 0x7ff})
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:20 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
r2 = semget(0x0, 0x3, 0x20)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f00000006c0)=""/168)
semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:20 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000800))
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:20 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x8}, {0x1ff, 0x4, 0x7, 0x6}, {0x7ff, 0x0, 0x0, 0x8001}, {0xff, 0xff, 0xfd, 0x5}, {0x0, 0x6, 0x8, 0xe87d}]})
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:20 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:13:20 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r4 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:20 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

[  179.432184] Bluetooth: hci1: command 0x0406 tx timeout
[  179.433128] Bluetooth: hci0: command 0x0406 tx timeout
[  179.434265] Bluetooth: hci6: command 0x0406 tx timeout
[  179.435031] Bluetooth: hci2: command 0x0406 tx timeout
[  179.436096] Bluetooth: hci5: command 0x0406 tx timeout
[  179.436853] Bluetooth: hci7: command 0x0406 tx timeout
[  179.437575] Bluetooth: hci3: command 0x0406 tx timeout
[  184.039836] INFO: task rcu_gp:3 blocked for more than 143 seconds.
[  184.041375]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.042633] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.044356] task:rcu_gp          state:I stack:30328 pid:3     ppid:2      flags:0x00004000
[  184.047040] Call Trace:
[  184.047629]  <TASK>
[  184.048206]  __schedule+0x893/0x2470
[  184.048960]  ? io_schedule_timeout+0x150/0x150
[  184.049620]  ? do_raw_spin_lock+0x121/0x260
[  184.050311]  ? rwlock_bug.part.0+0x90/0x90
[  184.050981]  schedule+0xda/0x1b0
[  184.051499]  rescuer_thread+0x851/0xdb0
[  184.052124]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.052899]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.053634]  ? lockdep_hardirqs_on+0x79/0x100
[  184.054333]  ? worker_thread+0x1260/0x1260
[  184.055006]  kthread+0x2ed/0x3a0
[  184.055546]  ? kthread_complete_and_exit+0x40/0x40
[  184.056342]  ret_from_fork+0x22/0x30
[  184.056984]  </TASK>
[  184.057354] INFO: task rcu_par_gp:4 blocked for more than 143 seconds.
[  184.058363]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.059191] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.060387] task:rcu_par_gp      state:I stack:30944 pid:4     ppid:2      flags:0x00004000
[  184.061700] Call Trace:
[  184.062107]  <TASK>
[  184.062495]  __schedule+0x893/0x2470
[  184.063131]  ? io_schedule_timeout+0x150/0x150
[  184.063868]  ? do_raw_spin_lock+0x121/0x260
[  184.064551]  ? rwlock_bug.part.0+0x90/0x90
[  184.065254]  schedule+0xda/0x1b0
[  184.065822]  rescuer_thread+0x851/0xdb0
[  184.066475]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.067301]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.068122]  ? lockdep_hardirqs_on+0x79/0x100
[  184.068866]  ? worker_thread+0x1260/0x1260
[  184.069554]  kthread+0x2ed/0x3a0
[  184.070136]  ? kthread_complete_and_exit+0x40/0x40
[  184.070951]  ret_from_fork+0x22/0x30
[  184.071570]  </TASK>
[  184.071974] INFO: task slub_flushwq:5 blocked for more than 143 seconds.
[  184.073015]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.073850] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.075071] task:slub_flushwq    state:I stack:30944 pid:5     ppid:2      flags:0x00004000
[  184.076378] Call Trace:
[  184.076815]  <TASK>
[  184.077188]  __schedule+0x893/0x2470
[  184.077785]  ? io_schedule_timeout+0x150/0x150
[  184.078509]  ? do_raw_spin_lock+0x121/0x260
[  184.079226]  ? rwlock_bug.part.0+0x90/0x90
[  184.079940]  schedule+0xda/0x1b0
[  184.080494]  rescuer_thread+0x851/0xdb0
[  184.081149]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.081948]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.082782]  ? lockdep_hardirqs_on+0x79/0x100
[  184.083470]  ? worker_thread+0x1260/0x1260
[  184.084135]  kthread+0x2ed/0x3a0
[  184.084636]  ? kthread_complete_and_exit+0x40/0x40
[  184.085353]  ret_from_fork+0x22/0x30
[  184.085934]  </TASK>
[  184.086293] INFO: task netns:6 blocked for more than 143 seconds.
[  184.087133]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.087880] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.088934] task:netns           state:I stack:30944 pid:6     ppid:2      flags:0x00004000
[  184.090140] Call Trace:
[  184.090521]  <TASK>
[  184.090888]  __schedule+0x893/0x2470
[  184.091436]  ? io_schedule_timeout+0x150/0x150
[  184.092105]  ? do_raw_spin_lock+0x121/0x260
[  184.092749]  ? rwlock_bug.part.0+0x90/0x90
[  184.093360]  schedule+0xda/0x1b0
[  184.093875]  rescuer_thread+0x851/0xdb0
[  184.094468]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.095188]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.095913]  ? lockdep_hardirqs_on+0x79/0x100
[  184.096550]  ? worker_thread+0x1260/0x1260
[  184.097179]  kthread+0x2ed/0x3a0
[  184.097661]  ? kthread_complete_and_exit+0x40/0x40
[  184.098403]  ret_from_fork+0x22/0x30
[  184.098988]  </TASK>
[  184.099329] INFO: task kworker/0:0:7 blocked for more than 143 seconds.
[  184.100227]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.100969] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.102167] task:kworker/0:0     state:I stack:29592 pid:7     ppid:2      flags:0x00004000
[  184.103520] Workqueue:  0x0 (ata_sff)
[  184.104131] Call Trace:
[  184.104528]  <TASK>
[  184.104922]  __schedule+0x893/0x2470
[  184.105533]  ? io_schedule_timeout+0x150/0x150
[  184.106257]  schedule+0xda/0x1b0
[  184.106881]  worker_thread+0x15f/0x1260
[  184.107551]  ? process_one_work+0x16a0/0x16a0
[  184.108307]  kthread+0x2ed/0x3a0
[  184.109139]  ? kthread_complete_and_exit+0x40/0x40
[  184.109962]  ret_from_fork+0x22/0x30
[  184.110719]  </TASK>
[  184.111104] INFO: task kworker/0:0H:8 blocked for more than 143 seconds.
[  184.112155]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.113012] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.114198] task:kworker/0:0H    state:I stack:29760 pid:8     ppid:2      flags:0x00004000
[  184.115532] Workqueue:  0x0 (events_highpri)
[  184.116230] Call Trace:
[  184.116646]  <TASK>
[  184.117062]  __schedule+0x893/0x2470
[  184.117710]  ? io_schedule_timeout+0x150/0x150
[  184.118479]  schedule+0xda/0x1b0
[  184.119041]  worker_thread+0x15f/0x1260
[  184.119729]  ? process_one_work+0x16a0/0x16a0
[  184.120440]  kthread+0x2ed/0x3a0
[  184.121031]  ? kthread_complete_and_exit+0x40/0x40
[  184.121817]  ret_from_fork+0x22/0x30
[  184.122462]  </TASK>
[  184.122872] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds.
[  184.123912]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.124769] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.125985] task:mm_percpu_wq    state:I stack:30944 pid:10    ppid:2      flags:0x00004000
[  184.127326] Call Trace:
[  184.127747]  <TASK>
[  184.128111]  __schedule+0x893/0x2470
[  184.128762]  ? io_schedule_timeout+0x150/0x150
[  184.129494]  ? do_raw_spin_lock+0x121/0x260
[  184.130220]  ? rwlock_bug.part.0+0x90/0x90
[  184.130948]  schedule+0xda/0x1b0
[  184.131475]  rescuer_thread+0x851/0xdb0
[  184.132145]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.132938]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.133769]  ? lockdep_hardirqs_on+0x79/0x100
[  184.134505]  ? worker_thread+0x1260/0x1260
[  184.135214]  kthread+0x2ed/0x3a0
[  184.135777]  ? kthread_complete_and_exit+0x40/0x40
[  184.136546]  ret_from_fork+0x22/0x30
[  184.137214]  </TASK>
[  184.137594] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds.
[  184.138720]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.139509] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.140722] task:rcu_tasks_kthre state:I stack:29272 pid:11    ppid:2      flags:0x00004000
[  184.142042] Call Trace:
[  184.142466]  <TASK>
[  184.142875]  __schedule+0x893/0x2470
[  184.143474]  ? io_schedule_timeout+0x150/0x150
[  184.144198]  ? mark_held_locks+0x9e/0xe0
[  184.144883]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.145728]  schedule+0xda/0x1b0
[  184.146253]  rcu_tasks_one_gp+0x3db/0xc10
[  184.146991]  rcu_tasks_kthread+0x80/0xa0
[  184.147618]  ? rcu_tasks_postscan+0x10/0x10
[  184.148343]  kthread+0x2ed/0x3a0
[  184.148911]  ? kthread_complete_and_exit+0x40/0x40
[  184.149663]  ret_from_fork+0x22/0x30
[  184.150308]  </TASK>
[  184.150745] INFO: task kworker/1:0:20 blocked for more than 143 seconds.
[  184.151810]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.152638] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.153856] task:kworker/1:0     state:I stack:29736 pid:20    ppid:2      flags:0x00004000
[  184.155187] Workqueue:  0x0 (rcu_gp)
[  184.155791] Call Trace:
[  184.156197]  <TASK>
[  184.156577]  __schedule+0x893/0x2470
[  184.157228]  ? io_schedule_timeout+0x150/0x150
[  184.157976]  schedule+0xda/0x1b0
[  184.158553]  worker_thread+0x15f/0x1260
[  184.159265]  ? process_one_work+0x16a0/0x16a0
[  184.160004]  kthread+0x2ed/0x3a0
[  184.160559]  ? kthread_complete_and_exit+0x40/0x40
[  184.161331]  ret_from_fork+0x22/0x30
[  184.161985]  </TASK>
[  184.162384] INFO: task kworker/1:0H:21 blocked for more than 143 seconds.
[  184.163450]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.164307] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.165510] task:kworker/1:0H    state:I stack:29376 pid:21    ppid:2      flags:0x00004000
[  184.166851] Workqueue:  0x0 (kblockd)
[  184.167437] Call Trace:
[  184.167885]  <TASK>
[  184.168264]  __schedule+0x893/0x2470
[  184.168910]  ? io_schedule_timeout+0x150/0x150
[  184.169613]  schedule+0xda/0x1b0
[  184.170198]  worker_thread+0x15f/0x1260
[  184.170933]  ? process_one_work+0x16a0/0x16a0
[  184.171647]  kthread+0x2ed/0x3a0
[  184.172233]  ? kthread_complete_and_exit+0x40/0x40
[  184.173023]  ret_from_fork+0x22/0x30
[  184.173648]  </TASK>
[  184.174109] 
[  184.174109] Showing all locks held in the system:
[  184.175074] 1 lock held by rcu_tasks_kthre/11:
[  184.175784]  #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10
[  184.177333] 1 lock held by khungtaskd/25:
[  184.177972]  #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  184.179413] 1 lock held by in:imklog/189:
[  184.180093]  #0: ffff88800de4ed68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[  184.181419] 2 locks held by syz-executor/4184:
[  184.182134] 
[  184.182443] =============================================
[  184.182443] 
[  187.623815] Bluetooth: hci4: command 0x0406 tx timeout
15:13:32 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
semget(0x0, 0x3, 0x20)
semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:32 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="e551d8905eb6a898c4200f79bc1ca3a28c1723c56506256e1ed5e359106ca4eaa597cb800cccf371a39f3cf31667759a36e91fadf291320023", 0x39)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xfb95191771692244)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x14, 0x0, 0x800, 0x1f, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="6c2fab581fd84c6a3a2894ee3ee729a15c1cbf97c389d4f92983eb1f53a19a354e05d8774937807664e9374392b77d3f295416dd885d48c6a6567ebc61a6096b8f5dd46e82d4ff24d0e66b31c3620f31224a615e3d8a", 0x56)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0x58, 0xc5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x8201)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000240)=0x7fffffff, 0x3ff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x4, 0x0, 0xffff0001, {0x7ff, 0x4}, 0x7, 0x5})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000340)=""/131, 0x83}, &(0x7f0000000440)=0x40)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x241, @time={0x95e3, 0x7ff}, 0x7, {0x6, 0x2}, 0x8, 0x0, 0x3})
memfd_secret(0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000540)={0x3f, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x1000}, 0x8})
add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "4e0ac7d1390ef7adb843e12efbe964fa15c7e40199cf8a99af3bdcaab562a6f1a7d4c0fb23f838182fef0113a3ad9ebc5780440c339e930feeb48c5fca163e03", 0x40}, 0x48, 0xfffffffffffffffe)

15:13:32 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

15:13:32 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:32 executing program 0:
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000003f80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000004000)=0x80, 0x800)
write$bt_hci(r0, &(0x7f0000004040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004080)=""/27, 0x1b}, {&(0x7f00000040c0)=""/150, 0x96}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/128, 0x80}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/152, 0x98}, {&(0x7f00000053c0)=""/81, 0x51}], 0x8, &(0x7f00000054c0)=""/84, 0x54}, 0x40)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005580), 0x204480)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000055c0))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000005600)=0x1, &(0x7f0000005640)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000005680), r0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000056c0)={'tunl0', 0x32, 0x34}, 0x8)
socket(0xb, 0x1, 0xfffffc01)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x80000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000005740))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4000010, 0xffffffffffffffff, 0x8000000)
r4 = memfd_secret(0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f00000057c0), r4)
recvmmsg(r4, &(0x7f0000006940)=[{{&(0x7f0000005800)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005880)=""/19, 0x13}, {&(0x7f00000058c0)=""/61, 0x3d}, {&(0x7f0000005900)=""/104, 0x68}, {&(0x7f0000005980)}, {&(0x7f00000059c0)=""/30, 0x1e}, {&(0x7f0000005a00)=""/55, 0x37}, {&(0x7f0000005a40)}], 0x7}, 0x9c}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/248, 0xf8}, {&(0x7f0000005c80)=""/155, 0x9b}, {&(0x7f0000005d40)=""/225, 0xe1}, {&(0x7f0000005e40)=""/189, 0xbd}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x9d}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/55, 0x37}], 0x1, &(0x7f0000006140)=""/90, 0x5a}, 0x5}, {{&(0x7f00000061c0)=@isdn, 0x80, &(0x7f0000006580)=[{&(0x7f0000006240)=""/204, 0xcc}, {&(0x7f0000006340)=""/74, 0x4a}, {&(0x7f00000063c0)=""/5, 0x5}, {&(0x7f0000006400)=""/156, 0x9c}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/118, 0x76}], 0x6, &(0x7f0000006600)=""/79, 0x4f}, 0x9}, {{&(0x7f0000006680)=@pppol2tpin6, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/42, 0x2a}, {&(0x7f0000006740)=""/142, 0x8e}], 0x2, &(0x7f0000006840)=""/240, 0xf0}, 0x9}], 0x5, 0x41, &(0x7f0000006a80)={0x77359400})

15:13:32 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
r4 = add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000006340), &(0x7f0000006380)={'syz', 0x3}, 0x0, 0x0, r4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:32 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
read$ptp(0xffffffffffffffff, &(0x7f0000000740)=""/156, 0x9c)
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:32 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:32 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000006c0)={'\x00', 0x0, 0x3, 0x4})
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:32 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/230, 0xe6}], 0x3, &(0x7f0000000380)=""/150, 0x96}, 0x46}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/36, 0x24}], 0x2, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x2, 0xc0010000, &(0x7f0000000680))
semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:32 executing program 7:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x22b936cc)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0xc01, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4859e0dabf913c144518b66e380092f5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000080}, 0x8004)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x3, 0x3}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffff)
r1 = memfd_secret(0x80000)
write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x6, 'pids'}]}, 0xe)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'memory'}, {0x2b, 'hugetlb'}, {0x2d, 'blkio'}]}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000004c0)=""/81)

15:13:32 executing program 1:
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xc0000, 0x2, 0xfffffbff})
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x5})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000003c0)={{0x1f, 0x8a}, {0x8, 0x6}, 0x8, 0x1})
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x11080, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@noextend}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, ':'}}]}})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000680))
socket(0x0, 0x9b5449212a455845, 0x3)

15:13:32 executing program 6:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x1, 0x3000}, {0x4, 0x401, 0x800}, {0x4, 0x3}, {0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}], 0x5, &(0x7f0000000080)={r0, r1+10000000})
clock_gettime(0x4, &(0x7f00000000c0))
semget(0x3, 0x4, 0x8)
semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000b80)=""/44)

15:13:32 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0xee01, r2, 0xee00, r1, 0xc, 0xfffe}, 0x908, 0xf54b, 0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x420040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r1)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000200)=""/177)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'lo\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x0, 'client1\x00', 0x2, "942cfd11e8c0d323", "6b1ac6095fd1926eb4c6e11182a9c887711fbfd343e2085a75cc53eea94e4905", 0x101, 0xfff})
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a00040, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@privport}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}})

15:13:32 executing program 5:
getgid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}})
recvmsg(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/88, 0x58}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}, 0x2)
r0 = accept4(0xffffffffffffffff, &(0x7f0000002400)=@caif, &(0x7f0000002480)=0x80, 0x80000)
recvmsg(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/231, 0xe7}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/129, 0x81}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x8}, 0x1)
r1 = memfd_secret(0x80000)
clock_gettime(0x0, &(0x7f00000061c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/53, 0x35}, {&(0x7f0000003b40)=""/158, 0x9e}], 0x3, &(0x7f0000003c40)=""/43, 0x2b}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/145, 0x91}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/27, 0x1b}], 0x3, &(0x7f0000004e40)=""/107, 0x6b}, 0x7}, {{&(0x7f0000004ec0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/119, 0x77}, {&(0x7f0000004fc0)=""/26, 0x1a}, {&(0x7f0000005000)=""/158, 0x9e}], 0x3, &(0x7f0000005100)=""/4096, 0x1000}, 0x1}], 0x3, 0x10040, &(0x7f0000006200)={r2, r3+60000000})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000006240)=0x6e3, 0x2)
accept4(r1, &(0x7f0000006280)=@generic, &(0x7f0000006300)=0x80, 0x0)
add_key$keyring(&(0x7f00000063c0), &(0x7f0000006400)={'syz', 0x2}, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000006580), 0x4400, 0x0)

15:13:32 executing program 3:
shmget(0x0, 0x9000, 0x8, &(0x7f0000ff4000/0x9000)=nil)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff4000/0x4000)=nil)
mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, 0xffffffffffffffff, 0xd5c3d000)
semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000000))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x20000000)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x6, 0x40)
r0 = semget(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x2, 0x100, 0x1000}, {0x0, 0x8e0}, {0x3, 0x5, 0x1000}, {0x2, 0x5}, {0x1, 0x7e0, 0x1000}], 0x6, &(0x7f0000000200)={r1, r2+10000000})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x1000c080)
r3 = semget(0x0, 0x1, 0x1)
semtimedop(r3, &(0x7f0000000380)=[{0x3, 0xdf, 0x800}, {0x4, 0x6, 0x1000}], 0x2, &(0x7f00000003c0)={0x77359400})
r4 = semget(0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r5=>0x0, <r6=>0x0})
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x5, 0x1000}, {0x0, 0x8, 0x1c00}, {0x2, 0x7fff}, {0x1, 0x7}, {0x4, 0x61f, 0x1000}, {0x2, 0x6, 0x800}], 0x6, &(0x7f0000000480)={r5, r6+10000000})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x90)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x5])
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)


VM DIAGNOSIS:
15:13:25  Registers:
info registers vcpu 0
RAX=ffff88801003b580 RBX=ffffc90011f746e0 RCX=ffffffff817bd091 RDX=1ffff110020076b0
RSI=0000000000000008 RDI=ffff88801003b580 RBP=dffffc0000000000 RSP=ffff888037827aa0
R8 =0000000000000000 R9 =ffff88801003b587 R10=ffffed10020076b0 R11=0000000000000001
R12=ffffc90011f74ff9 R13=ffff88801003b580 R14=0000000000000000 R15=0000000000000086
RIP=ffffffff817bd3b3 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556d8a400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005617fc95f758 CR3=000000001d464000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM01=0000000000000000 0000000000000000 00ff000000000000 00ff00000000ff00
YMM02=0000000000000000 0000000000000000 00ff000000000000 00ff00000000ff00
YMM03=0000000000000000 0000000000000000 00ff00000000ff00 000000ff000000ff
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000200000 0000000000200000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005617fc972ed0 CR3=0000000015d9a000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 0000000000000000 4150724000000000
YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441
YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962
YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69
YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000